Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: IUiOEtbuojkgfE9bFHeFV4SlR/P0It2TCwVcscSwoQ4=
Subject key identifier: 0F:91:92:C4:CA:C6:B6:5F:35:1D:F2:8E:B5:C6:B7:49:F0:49:22:53
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 0EBB6923230062248609FEC9EE853F7DDAA963B2
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
Signing time: Thu 11 Apr 2024 09:02:30 +0000
ROA not before: Thu 11 Apr 2024 08:57:30 +0000
ROA not after: Thu 10 Apr 2025 09:02:30 +0000
asID: 58487
IP address blocks: 202.10.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bb:69:23:23:00:62:24:86:09:fe:c9:ee:85:3f:7d:da:a9:63:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Apr 11 08:57:30 2024 GMT
Not After : Apr 10 09:02:30 2025 GMT
Subject: CN=0F9192C4CAC6B65F351DF28EB5C6B749F0492253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:de:f7:dd:c6:e1:22:9e:aa:eb:36:d2:bc:
10:ed:50:0c:0a:93:73:fe:e2:4e:e9:46:c6:33:91:
af:0c:89:82:32:01:5b:cf:cf:06:90:e8:fb:99:3f:
00:eb:92:08:2b:c7:42:f1:29:5d:ae:66:a6:65:2b:
84:e4:0e:79:1a:be:a1:e0:2f:79:f9:8e:26:41:99:
be:9b:ee:83:be:09:2f:c7:5a:56:76:65:e5:38:fd:
ec:39:ff:99:19:0c:b1:cf:48:9d:12:b8:de:46:43:
08:35:b1:0e:40:53:40:94:de:4a:f3:95:24:23:32:
45:28:c9:92:27:9e:99:1c:db:d3:9c:8d:f8:6e:40:
3f:b7:87:dc:8a:03:30:24:da:50:5f:7e:c2:81:fd:
79:ea:5b:a5:9f:f2:90:25:f2:fd:6f:a3:15:0a:0f:
54:5e:f7:d1:92:94:ba:03:de:4e:ab:c4:50:24:9f:
34:78:5e:86:14:85:7e:5d:8f:ff:fb:e6:63:b5:dc:
60:2b:60:69:ab:d8:fd:7e:fe:14:20:d9:77:2f:91:
70:56:24:3a:76:f6:46:01:0e:80:f6:bd:fe:44:dd:
f0:42:97:db:e7:2d:e2:d2:75:ed:19:67:cc:64:19:
58:60:b3:aa:5e:5c:64:93:20:a9:6a:1b:2b:60:b3:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:92:C4:CA:C6:B6:5F:35:1D:F2:8E:B5:C6:B7:49:F0:49:22:53
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a7:cb:96:88:42:ee:dc:fb:9c:72:45:9c:e6:12:45:62:78:
0d:75:b0:f5:6f:34:80:8e:dd:1f:fa:e0:02:95:3c:0c:4e:12:
a9:6d:bc:75:3a:97:31:03:57:f5:3c:aa:a0:6a:c4:5e:d0:c5:
d7:2b:45:9a:15:84:89:1e:aa:c8:dd:79:4a:bc:4b:76:e3:08:
d4:b9:4c:af:e9:cd:6e:0c:ab:ee:ed:62:ff:7c:40:84:24:df:
b7:8f:72:88:1c:04:10:49:16:f7:e5:ae:46:45:ec:c6:fc:1a:
9b:9a:ab:a6:82:bb:ca:98:a3:25:e7:aa:d2:99:bc:6c:d8:1b:
27:e7:e0:33:22:63:62:6e:69:0a:5a:11:dc:c1:75:1d:c9:4e:
05:9f:91:7f:e4:ca:94:d2:ff:f3:a8:c0:f1:4c:7e:aa:45:e0:
03:3e:a0:0d:70:c5:db:d9:e4:57:d3:9e:a0:36:e1:33:2b:d9:
4d:6f:10:d0:15:e9:2f:ef:3d:39:6e:c9:b2:34:a6:86:c1:cd:
0f:41:a7:da:73:c1:e1:1b:b1:83:92:8d:27:4a:e5:95:07:b0:
86:91:62:7c:85:e0:38:7c:0e:24:6c:73:c2:16:3b:ee:93:d5:
47:c3:4f:31:5b:80:30:06:14:d0:4a:28:b1:6c:c8:aa:fb:6f:
4f:f0:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:18:55 2025 by rpki-client